Re: Debian-13.6: winbind issue

On Sun, 19 Jul 2026 11:18:35 +0200
"Stefan G. Weichinger via samba" <[email protected]> wrote:

> Am 18.07.26 um 15:10 schrieb Rowland Penny via samba:
> > On Sat, 18 Jul 2026 14:10:00 +0200
> > "Stefan G. Weichinger via samba" <[email protected]> wrote:
> >> Jul 18 10:24:51 samba winbindd[843086]: unable to dlopen
> >> /usr/lib/x86_64-linux-gnu/sasl2/libsasl-xoauth2.so:
> >> libjsoncpp.so.25:
> > 
> > I do not have that '.so' and a quick internet search shows that
> > sasl-xoath2 appears to be only available from experimental, so what
> > have you (or some other person) installed to get it ?
> 
> Uuh, interesting. I can't remember having played with this.
> 
> `dpkg -S` doesn't show an installed package providing this '.so' so I 
> was bold and deleted it. Restarted winbind, now without warning.
> We'll see.

You might want to look further into this. I did an internet search for
sasl-xoauth2 on debian and it shows 'Sorry, your search gave no
results' for Trixie, so if you haven't installed it, who did ?

> 
> Thank you.
> > Also, I feel sure I have said this before, it is advisable to
> > install Samba from trixie-backports, this will get you 4.24.4 at
> > present.
> Thanks for repeating. I might consider doing that later, and maybe in 
> other sites at first.
> 
> 

The thing is, it is always better to use the latest version of Samba
possible, especially on an AD DC, it ensures that you have all the
possible bug fixes. Samba 4.22.x only gets security fixes at present
from Samba, Debian may backport other fixes, but when 4.25.0 is
released in September all updates from Samba will stop for the 4.22
series.

Rowland


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba